Nortel BSR252, Configuration - Basics

Page: 211 / 460

Chapter 13 VPN 211
Nortel Business Secure Router 252 Configuration — Basics
Table 47 describes the fields in Figure 67 .
Table 47 Summary
Label Description
Contivity VPN
Client
The Contivity VPN Client is a simple VPN rule that lets you define and
store connection information for accessing your corporate network
using the Business Secure Router. The Contivity VPN Client uses the
IPSec protocol to establish a secure end-to-end connection. If you want
to set the Contivity Client rule to active, you must set all other VPN rules
to inactive.
When this button displays
Connect , click it to create a VPN connection
to the remote Contivity switch.
When this button displays
Disconnect , click it to drop the Contivity VPN
connection.
# This is the VPN rule index number.
Name This field displays the name you specified in the VPN Branch Office
Rule Setup screen to identify this VPN policy.
Active This field displays whether the VPN rule is active or not. A Yes signifies
that this VPN rule is active. No signifies that this VPN rule is not active.
Private /Local /
Remote Policy
IP Address
These are the IP addresses of the computers that can use the VPN
tunnel. Ranges of IP addresses are indicated by the starting and ending
IP addresses separated by a dash. You configure these IP addresses in
the VPN Branch Office IP Policy screen. This field is empty if you do
not configure the VPN branch office rule to use an IP policy.
Private IP addresses are IP addresses of computers on your Business
Secure Router's local network, for which you have configured the IP
policy to use NAT for the VPN tunnel.
Local IP addresses are the IP addresses of the computers on your
Business Secure Router's local network that can use the VPN tunnel.
Remote IP addresses are the IP addresses of the computers behind the
remote IPSec router that can use the VPN tunnel. When 0.0.0.0
displays, only the remote IPSec router can initiate the VPN. The
address 0.0.0.0 displays when the Secure Gateway Address field is
configured to 0.0.0.0 or the IP policy's Remote Starting IP Address
field is set to 0.0.0.0 in the IP Policy screen.
Encap This field displays Tunnel or Transport mode.
IPSec
Algorithm
This field displays the security protocols used for an SA.
Both
AH and ESP increase Business Secure Router processing
requirements and communications latency (delay).
Secure
Gateway
Address
This is the static WAN IP address or URL of the remote IPSec router.
This field displays 0.0.0.0 when you configure the Secure Gateway
Address field in the VPN Branch Office screen to 0.0.0.0.